Database Users

activesync 4.1 and exchange server 2003

I'm trying to synchronizise with the exchange server at my work.
But for some reason it doesn't work. I've filled in everything in the right way (address, domein etc.) the fault code is 80070002.
Can somebody help me with this?

same here at home (no firewalls)

Works fine for me. Exchange server needs just some configuration.

Priit said:
Works fine for me. Exchange server needs just some configuration.
Click to expand...
Click to collapse
What kind of configuration?

First, your Outlook Web Access (yes, OWA!) can not use forms based authentication nor SSL encryption. If you don want to use these (you most probably want to use SSL) then you need to create another virtual OWA directory without SSL and force ActiveSync (and Outlook Mobile Access) to use it.
More information at
http://support.microsoft.com/default.aspx?scid=kb;en-us;817379
Check if you can access OMA (Outlook Mobile Access) using http://yourserver/oma and check also Exchange server logs.

I thought this wasn't supported on WM5 until AKU 2.0 comes out (hopefully soon)

So ur saving I have to turn Forms authentication off and ssl off on OWA for my mobile device to work ?
sounds a bit of a poor show.
I need Forms based auth ideally as it goes through firewalls where as the other type does not.

Ours works here and we use SSL.
For the server name make sure you are using the fully qualified domain name that you use from the internet. IE: mail.domain.com. You don't have to put the /exchange on the end.
username, password and domain are all the same as what you use to log in.
OH, and the certificate you use on the server should be for mail.domain.com and not servername.
Hope this helps.

@spartanrob: DirectPush needs AKU2.0. You have always had possibility to sync manually. Or if your operator provides e-mail to SMS then you have the same functionality already today.

@Karzi:
No, I'm not saying you have to turn off SSL and/or forms-based auth., but you need to create another virtual OWA directory, which does not require SSL and forms-based authentication. You can limit access to this directory to localhost only so there will be no security concerns.
@MrHappy:
Your server is probably set up in that way.

Please go read this it helped me with the same error
http://hardware.mcse.ms/archive35-2005-11-248477.html
Basicly says that you have to download the cert from https://server.domain.com/certsrv then install the certificate on your desktop and your handheld then activesync will work....
I was hesitant but it worked for me.... it changed the path in the cert from my ip to my server.domain.com

Odd Proxy Server Question

Hi
Got an odd one. at work we have a domain (active directories and all the rest of it). as a result only domain computers can access the internet via the proxy server.
so my desktop works just fine being on the domain, but when i active sync my wizard, active sync effectively puts my phone on the network and nicks the proxy settings from my desktop. but the proxy rejects my phone as its not a domain machine. sure others have this issue.
does anyone know of some errr mini proxy server or something like that, that can run on my desktop to act as a server for my networked phone, meaning the proxy will not even see my phone and therefore not reject it.
i have messed with windows network sharing etc... and i don't think its the way to go.
anyone have any ideas?

Activesync Exchange Server Password Prompt

I have an 8125 with Summiter's 2.3 Rom installed. I am trying to establish a connection to my exchange server which is hosted. When I enter the server, user ID, password and Domain info correctly, activesync keeps prompting me with "Please correct your Exchange Server password"
My provider insists that the settings were correct on their side and their crack tech support staff told me that WM5 has problems storing the password. They said that the only thing to do is to keep deleting the server connection on the device and recreating it.
Through this persistence, I was able to get it configured once. It was syncing (with push email) for most of the day... until I connected the device to the PC with the USB cable to charge it. Then Activesync on the PC kicked in and the password prompts began.
I have deleted and reconfigured the server on the device in excess of 20 times now with every combination of soft resets in between to try to get this resolved.
Any thoughts? Your help is greatly appreciated!
***EDIT***
email host needed to create a pre-NT4 alias for the userid due to the naming convention ues by our company in their provisioning console. Therefore once I found out the alias the config was a snap. working perfectly now! Thanks.

What tech support for your host meant to tell you is that they do not have a clue what they are talking about. I support numerous WM implementations using AUTD and Push email with WM devices of all flavors that support one of those options (2003, 2003se, 2005) and NONE of my customers have to continually put in ANY information to keep syncing.
It is true that using the special sms tickle method of pull on 2003 devices does sometimes hang up and have to be restarted manually but even then you should not be asked for information you already saved about the connection.
Find a new mail host.

Well, since you have no problems setting up "WM implementations using AUTD and Push email with WM devices", I would love to hear your thoughts on why I keep getting a password prompt over and over again with the message "Please corrrect your exchange Server password".
Using Cingluar 8125 with stock 2.25 ROM.
Mobile services are enabled under ESM
Pre-2k alias is set in the username
SSL is installed on the server with front end virtual directory
I have disabled certificate checking on the device itself by hacking the registry on the device since I'm using self singed cert
Exchange SP2 is installed
Activesync on the PC with USB works like a charm
But, trying to sync over GPRS/EDGE with the exchange server it keeps prompting me to correct exchange server password which I know it's correct since I administer the server myself.
I've seen NUMEROUS posts about this issue but no one seems to have the answer.
This is driving completely bonkers

You say you can sync while connected via USB to a computer but you do not specify whether that computer is INSIDE or OUTSIDE your network. So I am going to assume it is INSIDE, and bet that were you to try the same test from OUTSIDE your network it would fail just as it does using GPRS. If so the indications point to incorrectly putting in your user name/domain information and not the password itself.

I assure you, the domain\username and password combinations are quite right. It's DOMAIN\username and then the password. I mean you can't really get away from that format when you enter the information in the pocket pc or activesync on your pc since it asks you for the domain and the username and the password. I can however login to webmail and oma through the web browser using the exact username and password.
Any more thoughts?

I have no more thoughts until you answer the question I asked. Can you sync while connected to a computer that is OUTSIDE your network?
When putting in your information on the mobile device, in the username field if you are putting domain\user you are wrong. That box is USER NAME ONLY.

Let me start over again. No, usb or gprs outside doesn't work. And yes, the username is put in as just the username with no domain\ in front of it. Activesync substitutes the domain from the domain field as domain\ is what I meant.

So it doesn't work from outside no matter what the connection. Again, the problem is the domain reference. We just have to figure out what is wrong with it.
From outside your network, can you access Ouloook Web Access? If so, EXACTLY what is the URL you use?

I'm using https://servername/exchange
I can also user https://servername/oma from the phone and it works too.

I would really like to see https://servername/exchange work from outside your network. I am interested to know how you got a NETBIOS name to resolve from outside your DNS zone over the internet.
Please read the question asked before answering so I can stop asking you the same thing twice. I asked you:
From outside your network, can you access Ouloook Web Access? If so, EXACTLY what is the URL you use?
Click to expand...
Click to collapse
Your answer might work inside your network but no way will it work outside. And if you are afraid that advertising your domain name will compromise your Exchange box you should just shut it down anyway.

Ok,
I'm REALLY trying to be tolerant here. Unfortunately, I'm starting to reach the end of my patience. You and I BOTH know that I'm not advertising my NETBIOS name on the Internet. We BOTH know EXACTLY what I mean when I say https://servername/exchange. It means a URL accessible from the outside which points to the server via NAT on our firewall and then /exchange. So, here's the URL:
https://mail.glaucomaexpert.com/exchange
When I say that webmail works, I REALLY REALLY mean that it works. I'm not making it up. If you don't know the answer or if you are not sure of the answer, just let me know. That's no problem. I'm really starting to think that this issue is due to the registry hack on the phone to remove certificate checking.
Unfortunately, I'm using a self generated cert and I've tried using the .cab method to import the cert, that didn't work. I simply copied into a file (DER encoded) and tried to import it no workie either. I tried copying as a Base-64 encoded, copied to the phone and when I tried to import it said it was unable to access certificate. Before I disabled certificate checking, it wouldn't accept the certificate. So, now it accepts it but it keeps asking for the password.
I have gone over the exchange settings over and over and over again and I'm simply not seeing anything wrong.
So....here's where I am.

Great. Thanks for answering the question. So in your server configuration fields you are filling in those blanks like this:
Server Address: "mail.glaucomaexpert.com"
User Name: "jdoe" or whatever your user ID is
Password: "Password1!" Your CaSE sEnsiTIvE password
Domain: "myeyessuck" your internal NETBIOS domain name which may or may not be the same as your FQDN
Does all of that sound like what you are using? If you feel more comfortable PMing the information then thats fine. But your settings should resemble what I wrote.
Are you forcing users to use SSL for Outlook Web Access? If so, you might try turning it off TEMPORARILY and test syncing without requiring SSL to eliminate the self signed cert possibility. I won't be much use troubleshooting that as I get my customers fo flip for a Thawte certificate to avoid untrusted root cert authorities.

That's exactly what I'm using:
Server Address: "mail.glaucomaexpert.com"
User Name: "jdoe" or whatever your user ID is
Password: "Password1!" Your CaSE sEnsiTIvE password
Domain: "myeyessuck" your internal NETBIOS domain name
Under secure communications I do not have require secure channel checked.
I just enabled http(port 80) access to the exchange server and it's working like a charm.
So I guess it's still a certificate issue. I guess disabling certificate checking is not doing the trick but instead cause more problems.
I really wish I could import the self signed certificate. This really sucks. Your help is appreciated. Thanks. I should had tried this before. I just assumed this registry hack wouldn't have any bearing on it originally.

@deeztech - I'm also suspicious of the registry hack to disable the certificate checking. This worked for me in the 2003 days with my client's Blue Angels but I've never been able to get it to work with WM5. I have numerous Exchange 2003 servers that I maintain here in So. Fla and they all have self generated certs. I use MMC and add the Certificates snap-in. From the Trusted Root Authorities I'll right click my certificate - all tasks and then export to a Der encoded x.509. Copy to my storage card and execute it from there.
Of course it sounds like your certificate is installed correctly as your logon to OWA and OMA are working which is why I suspect that reg hack you mentioned.
I did read on exchange-experts to check the authentication on the webserver....
Curious if it's just your PDA or are there others with the same issue?

Glad you narrowed it down. Unfortunately I don't have a magic bullet for the self signed certificate piece but I do have some suggestions for you.
1) Enable forms based authentication: http://support.microsoft.com/kb/830827/
2) Require SSL for access
3) Unless you intend to offer services you might turn off the default website at https://mail.glaucomaexpert.com/
If you are interested in a cert from a trusted CA check out Thawte, where you can get an SSL123 certificate in just a few minutes for as little as $149: https://www.thawte.com/process/retail/new_ssl123?language=en&productInfo.productType=fssl2

Active sync - Exchange: SSL over a non-default port

My ISP blocks all ports below 1024 so I had to setup my SBS2003 Exchange server to run on port 8080 (HTTP) & 4443 (HTTPS), which works perfectly (tested locally & on remote locations).
When I add the correct secure portnumber to the server address (ActiveSync > Tools > Configure Server Source), ActiveSync cannot find our Exchange Server. When I remove the portnumber everything works fine as long as I'm on my local network.
I enter it like this: exchangeserverdomain.com:4443
I have OWA running perfectly by using the same external server address:<port>, and all needed certificates are on my WM6 device (it's the HTC Touch Dual).
Seems like ActiveSync doesn't like portnumbers.
Any tips?

Me 2
I'm having a similar problem.
Anyone can help?
Many thanks in advance.
Pozi.

If anyone has found a solution for this, I sure would appreciate knowing. As I'm sure you found, older stuff retrieved by Google makes it clear that MS just didn't provide support for ActiveSync on custom ports in previous WM versions, but couldn't they have remedied this oversight by now? Reg key?

Active sync - Exchange: SSL over a non-default port - Solved in WM65 ?
Any idea if there is a workaround for this problem in WM 6.5 ?
thanks,
Koen.

No, I don't know if WM6.5 finally added the ability to specify port number for Activesync server.
We solved this need by using "SSL host headers," which permit multiple IIS sites to use the default SSL port 443 with different host names. Although the IIS (6.0) GUI doesn't provide this capability, it can be done at the command line using adsutil.vbs found in Inetpub\adminscripts. It requires a wildcard SSL certificate, is a little tricky to get right, and results in a misleading error message in the event log every time IIS starts, but it does work reliably.
See:
http://www.microsoft.com/technet/pr...108-b1a7-494d-885d-f8941b07554c.mspx?mfr=true

ISP blocks all well-known ports - server activesync not working
thanks for the information, the configuration of Exchange is indeed not an issue.
Problem is that my ISP blocks all well-known (service) ports like 443,...
I would like to configure server activesync to use a different port (above 1024).
The Activesync interface on Windows mobile does not allow to enter a port number to specify the protocol.
eg. remote.company.com:4433 is automatically changed back to remote.company.com.
Any idea of a reg-key on WM to change the port to use for server activesync ?

If there is a way to do that in WM65, I don't know about it.
What kind of ISP "blocks all well-known ports"?
Good luck.

Not a solution per se but could you use SevenBeta to get your mail pushed? i think it works as long as you can get to the OWA server from the device. probably wouldn't give you contacts but at least you'd get mail while out of the office.

It's not Exchange, but the client...
I dislike it's come to this but it's true, the iPhone handles this over custom ssl ports just fine and I have not come across anything else that does. I do not know why. With the iPhone or iPod touch too I'd guess, you just enter your email address and password. It tries the regular ports and fails, and where you enter the server you enter your port like servername:customsslport and then you have full active synch abilities, synched email, all your subfolders, and the option to synch calendar and address book too.
I recently tried an android phone and looking for a solution, at this very site found out windows phones couldn't do this either... Developers have tried to give google this code correction but they won't accept it for whatever reason. I ended up using a tether to my old iPhone just to get decent ActiveSynch over custom SSL ports until I gave in and took back the Atrix for the newer iPhone, as my old phone was falling apart and was the older slower one. I've tried 2.1 & 2.2 Android phones and when you try to enter the port using serverort syntax you get invalid server format or the save button just gets grayed out until you remove the port. There's a few buggy market apps that sorta work in a limited way. It's possible the Blackberry may allow custom ssl ports on Exchange synch setup too, but I don't know, only that Windows and Android phones had issues with this but it works perfect on the iPhone, so it can't be a limitation of Exchange exactly. I haven't run into any good desktop clients for this, but to access full mobile email, synching even sent items and pushing select custom folders, calendar and contacts the iPhone truly synchs all these fine by entering the same port you use for custom OWA ssl in the Exchange email setup. I wish even desktop Outlook handled custom ssl port synching this well, and I'm not sure how the iPhone does it, as it seems very lightweight.
http://forum.xda-developers.com/showthread.php?t=602494
Lukasss said:
My ISP blocks all ports below 1024 so I had to setup my SBS2003 Exchange server to run on port 8080 (HTTP) & 4443 (HTTPS), which works perfectly (tested locally & on remote locations).
When I add the correct secure portnumber to the server address (ActiveSync > Tools > Configure Server Source), ActiveSync cannot find our Exchange Server. When I remove the portnumber everything works fine as long as I'm on my local network.
I enter it like this: exchangeserverdomain.com:4443
I have OWA running perfectly by using the same external server address:<port>, and all needed certificates are on my WM6 device (it's the HTC Touch Dual).
Seems like ActiveSync doesn't like portnumbers.
Any tips?
Click to expand...
Click to collapse

hmmm this is interesting

T-Zones port forwarding ?

If using T-Zones services, you get access to only few ports. However, ports like SSL and FTP are blocked. Is it possible to use a personal proxy server to get access to all unblocked ports somehow? Just thinking of an idea.
- TKN

tariq_niazi said:
If using T-Zones services, you get access to only few ports. However, ports like SSL and FTP are blocked. Is it possible to use a personal proxy server to get access to all unblocked ports somehow? Just thinking of an idea.
- TKN
Click to expand...
Click to collapse
Well mate if you are referring to using the t-zones as a free connection or hacking it then it was done and t-mobile during a big upgrade all but closed that gap. I myself have been trying for a loop hole through this as well because if they want to give me t-zones for free why not be able to utilize it fully . I do pay my cell bill every month .. lol

T-zones ssh proxy forwarding
Yes there is a way to do this.
And yes I have got this to work. Now I run skype, AIM, Remote Dektop, etc. from my T-zones EDGE connection. It is kind of slow though for things like Skype.
This is not intended to be easy, however if you spend enough time, you should be able to get it to work.
Here is the concept (For Windows XP),
Host an ssh server and a proxy server on your home computer.
I use copSSH for an ssh server (google it) and squid for windows for a proxy server (again google it and read the documentation!)
Set the ssh server to run on port 80 or port 143 (valid t-zones ports).
Set the proxy server to run on port 8118 (I just like that port number).
Use an ssh client on your windows mobile phone (such as pocketputty dev build 2007-02-28) (again, google).
Configure the ssh client to connect to your home ssh server via port 80 or 143
On the tunnel tab of pocketputty, add the ports you need to get to and direct them to localhostortno
For example, Port 8118 is my proxy server so I have tunnelled port 8118 to localhost:8118
Now I manually connect to my EDGE T-Zones connection, I run pocketputty and connect to my home server. I then login with my user credentials to my ssh server and everything validates and I get a bash shell. Now I run Skype Mobile and change it's settings to connect using an https proxy of localhost with port 8118.
You can do this with any port, such as Remote Desktop (port 3389)
then you just open Remote Desktop client on your phone and connect to the the address localhost:3389 (or localhost)
I know this is a bit much but it's not exactly a point and click process for now, so only try this if you are pretty sure you know your way around ports, ssh, and tunneling. You could always read a lot about it online if you are not. That's what I did.

drkmfdm said:
Yes there is a way to do this.
And yes I have got this to work. Now I run skype, AIM, Remote Dektop, etc. from my T-zones EDGE connection. It is kind of slow though for things like Skype.
This is not intended to be easy, however if you spend enough time, you should be able to get it to work.
Here is the concept (For Windows XP),
Host an ssh server and a proxy server on your home computer.
I use copSSH for an ssh server (google it) and squid for windows for a proxy server (again google it and read the documentation!)
Set the ssh server to run on port 80 or port 143 (valid t-zones ports).
Set the proxy server to run on port 8118 (I just like that port number).
Use an ssh client on your windows mobile phone (such as pocketputty dev build 2007-02-28) (again, google).
Configure the ssh client to connect to your home ssh server via port 80 or 143
On the tunnel tab of pocketputty, add the ports you need to get to and direct them to localhostortno
For example, Port 8118 is my proxy server so I have tunnelled port 8118 to localhost:8118
Now I manually connect to my EDGE T-Zones connection, I run pocketputty and connect to my home server. I then login with my user credentials to my ssh server and everything validates and I get a bash shell. Now I run Skype Mobile and change it's settings to connect using an https proxy of localhost with port 8118.
You can do this with any port, such as Remote Desktop (port 3389)
then you just open Remote Desktop client on your phone and connect to the the address localhost:3389 (or localhost)
I know this is a bit much but it's not exactly a point and click process for now, so only try this if you are pretty sure you know your way around ports, ssh, and tunneling. You could always read a lot about it online if you are not. That's what I did.
Click to expand...
Click to collapse
It's relatively simple what you saying here ...but I can't understand what is the function of squid ...I don't know how you change the Skype(or other software like IM+, Agile messenger, Palringo, wmirc etc.) settings to connect using localhost port 8118 (or any other port).
Few month ago I tried something like this based on this tutorial http://forum.xda-developers.com/showthread.php?t=316890 ...but without succes ...

drkmfdm said:
Yes there is a way to do this.
And yes I have got this to work. Now I run skype, AIM, Remote Dektop, etc. from my T-zones EDGE connection. It is kind of slow though for things like Skype.
This is not intended to be easy, however if you spend enough time, you should be able to get it to work.
Here is the concept (For Windows XP),
Host an ssh server and a proxy server on your home computer.
I use copSSH for an ssh server (google it) and squid for windows for a proxy server (again google it and read the documentation!)
Set the ssh server to run on port 80 or port 143 (valid t-zones ports).
Set the proxy server to run on port 8118 (I just like that port number).
Use an ssh client on your windows mobile phone (such as pocketputty dev build 2007-02-28) (again, google).
Configure the ssh client to connect to your home ssh server via port 80 or 143
On the tunnel tab of pocketputty, add the ports you need to get to and direct them to localhostortno
For example, Port 8118 is my proxy server so I have tunnelled port 8118 to localhost:8118
Now I manually connect to my EDGE T-Zones connection, I run pocketputty and connect to my home server. I then login with my user credentials to my ssh server and everything validates and I get a bash shell. Now I run Skype Mobile and change it's settings to connect using an https proxy of localhost with port 8118.
You can do this with any port, such as Remote Desktop (port 3389)
then you just open Remote Desktop client on your phone and connect to the the address localhost:3389 (or localhost)
I know this is a bit much but it's not exactly a point and click process for now, so only try this if you are pretty sure you know your way around ports, ssh, and tunneling. You could always read a lot about it online if you are not. That's what I did.
Click to expand...
Click to collapse
One other advantage of doing it this way is that ll your activity goes down a secure encrypted tunnel and so is unsniffable.

breakx said:
It's relatively simple what you saying here ...but I can't understand what is the function of squid ...I don't know how you change the Skype(or other software like IM+, Agile messenger, Palringo, wmirc etc.) settings to connect using localhost port 8118 (or any other port).
Few month ago I tried something like this based on this tutorial http://forum.xda-developers.com/showthread.php?t=316890 ...but without succes ...
Click to expand...
Click to collapse
Yes it takes a while and some resources to make this work but it can save you a lot on T-mobile's slow EDGE network.
Squid is a caching proxy which runs under linux, windows, etc. I use it to have complete encrypted web access that is cached and I use it for remote pc connections as well as windows mobile. You could also use Privoxy to have an ad and spyware filtering proxy. I do not use Squid for any other apps such as Skype or Remote Desktop.
The forum link you included is a great example of how to setup this type of connection and it's a much better description. I wish I had found it a while ago.
I can't speak for every application and its ability to select a port, however here is how Skype works. After installing Skype you have to first login to Skype using a normal internet connection such as through ActiveSync or WiFi. After Skype login completes, you open the options menu and fill in the proxy port number. Then you can disconnect and use the pocketputty method. Remote desktop is even easier, you just open a new connection and goto the address "localhostortnumber".

Way beyond me. I wish I understood because this sounds like exactly what I have been looking for.

drkmfdm said:
Yes there is a way to do this.
And yes I have got this to work. Now I run skype, AIM, Remote Dektop, etc. from my T-zones EDGE connection. It is kind of slow though for things like Skype.
This is not intended to be easy, however if you spend enough time, you should be able to get it to work.
Here is the concept (For Windows XP),
Host an ssh server and a proxy server on your home computer.
I use copSSH for an ssh server (google it) and squid for windows for a proxy server (again google it and read the documentation!)
Set the ssh server to run on port 80 or port 143 (valid t-zones ports).
Set the proxy server to run on port 8118 (I just like that port number).
Use an ssh client on your windows mobile phone (such as pocketputty dev build 2007-02-28) (again, google).
Configure the ssh client to connect to your home ssh server via port 80 or 143
On the tunnel tab of pocketputty, add the ports you need to get to and direct them to localhostortno
For example, Port 8118 is my proxy server so I have tunnelled port 8118 to localhost:8118
Now I manually connect to my EDGE T-Zones connection, I run pocketputty and connect to my home server. I then login with my user credentials to my ssh server and everything validates and I get a bash shell. Now I run Skype Mobile and change it's settings to connect using an https proxy of localhost with port 8118.
You can do this with any port, such as Remote Desktop (port 3389)
then you just open Remote Desktop client on your phone and connect to the the address localhost:3389 (or localhost)
I know this is a bit much but it's not exactly a point and click process for now, so only try this if you are pretty sure you know your way around ports, ssh, and tunneling. You could always read a lot about it online if you are not. That's what I did.
Click to expand...
Click to collapse
Sounds wonderful ................
Now can you please add some pictures and make a sweet how-to . I am sure many on the site will be happy to see your work . And I for one an very interested in it.

i don't know what kind of application you use on your pocket. But if your applications (like skype, fetchmail ) are able to use a socket server, you can go through easily via restricted ports of your provider.
I installed a socks server listening on an opened port, so now i can use skype and read my mails via this server.
Socks server :
With linux install : "dante"
With XP I don't know, but you can use "socksproxy" for tests (found on xda...). Take care this software is not secure ( or intall a DMZ with a firewall)...